Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3133382e3131372e3136302e302f32322d3232203d3e20323632313638.roa
File:                     3133382e3131372e3136302e302f32322d3232203d3e20323632313638.roa (raw, json)
Hash identifier:          ZgUZvmHBH8H8I3tWdGjI53MBmaRyqqLIbTa5EI95phQ=
Subject key identifier:   7C:88:C1:44:14:6D:05:E8:C6:9C:BF:61:16:F5:9A:B3:C6:78:79:99
Certificate issuer:       /CN=7537F6016D59B096CB4A693553B4A088507F512A
Certificate serial:       2582D154A48EB57BED9296EE779A399A98C35D8C
Authority key identifier: 75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3133382e3131372e3136302e302f32322d3232203d3e20323632313638.roa
Signing time:             Tue 04 Feb 2025 18:27:58 +0000
ROA not before:           Tue 04 Feb 2025 18:22:58 +0000
ROA not after:            Tue 03 Feb 2026 18:27:58 +0000
asID:                     262168
IP address blocks:        138.117.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:82:d1:54:a4:8e:b5:7b:ed:92:96:ee:77:9a:39:9a:98:c3:5d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7537F6016D59B096CB4A693553B4A088507F512A
        Validity
            Not Before: Feb  4 18:22:58 2025 GMT
            Not After : Feb  3 18:27:58 2026 GMT
        Subject: CN=7C88C144146D05E8C69CBF6116F59AB3C6787999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:17:6d:67:b8:30:43:45:6f:42:8b:2e:49:d8:
                    39:ab:9c:56:61:48:bf:79:7c:a9:c5:dc:7a:57:88:
                    8b:07:f0:eb:21:6c:36:a5:31:ac:81:dd:30:d6:f1:
                    d9:9e:f8:d9:ff:f4:a5:ed:1a:23:41:5b:ca:1c:42:
                    d0:80:a8:c6:59:9b:52:28:2d:c6:87:06:79:61:63:
                    3d:69:82:fc:d2:22:59:fe:e3:ec:07:bc:a4:7f:3a:
                    82:0f:9b:b8:42:7d:a4:5d:63:67:23:b7:77:2b:4d:
                    ed:29:44:81:13:aa:ef:4e:91:14:07:45:cd:04:7c:
                    02:5c:23:1b:24:36:1c:14:ac:b0:19:d3:fc:30:bf:
                    a1:7f:14:40:66:dc:12:f6:78:03:d0:c9:d3:4b:18:
                    f1:cd:42:27:1d:19:08:5e:4b:71:d2:fa:e6:28:74:
                    29:42:d6:54:19:6a:66:5d:fd:d3:3d:a1:3f:6c:07:
                    ae:2f:78:8d:38:db:f9:aa:61:c4:8d:d2:06:b3:ed:
                    f6:6e:1f:2f:64:2b:d6:75:7b:bc:d8:ef:00:89:e2:
                    cd:d6:5d:8e:d9:2b:4b:b1:b2:7c:94:1f:6b:03:d0:
                    55:ad:2b:6e:53:96:9b:9c:10:32:91:a3:96:3c:21:
                    bb:a4:6d:2f:1b:54:b0:32:6b:43:1a:5b:a0:99:6b:
                    25:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:88:C1:44:14:6D:05:E8:C6:9C:BF:61:16:F5:9A:B3:C6:78:79:99
            X509v3 Authority Key Identifier:
                keyid:75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3133382e3131372e3136302e302f32322d3232203d3e20323632313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:69:6e:67:c7:73:f9:d8:0d:c3:13:54:58:53:05:47:09:99:
         12:b9:37:ef:6a:78:d6:40:fb:f2:6e:24:99:31:e0:50:a3:c8:
         06:d9:24:29:7d:68:0d:ce:d4:db:f7:17:86:de:05:06:a0:a3:
         0f:fd:ce:db:29:0f:99:a2:ca:b0:23:d3:cb:7b:3b:29:2e:b9:
         5f:f8:6d:79:e4:3e:2e:82:43:39:61:6a:4e:e8:c3:5b:51:25:
         d5:9d:db:ec:fa:5c:46:34:d9:bc:03:c0:c3:2e:b5:2f:f3:1e:
         0b:d1:9d:ed:3d:5e:bc:90:16:b3:41:c0:a8:74:af:f3:81:f8:
         62:83:5d:8c:c2:b8:11:48:7d:81:da:8b:39:70:de:32:67:b8:
         5c:61:d1:bb:ba:6d:5a:40:c4:4c:51:49:9c:b7:82:b9:bd:47:
         28:2e:6e:a6:4c:67:64:da:52:8a:e4:79:3b:00:ed:8a:a3:94:
         4d:ed:d1:23:7f:a2:d8:03:41:19:5c:79:1a:9a:41:c1:cc:ac:
         46:ea:44:c0:09:84:4d:b4:c1:e0:b9:30:b5:6f:18:3a:f1:f7:
         32:8b:36:fc:f0:67:8d:2a:26:c8:1a:13:2f:f7:a0:0c:13:89:
         87:6d:2d:fa:e3:f7:d0:de:44:a4:bd:89:80:0e:fa:c4:a4:e3:
         be:e0:b8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:06:11 2025 by rpki-client